Privacy Policy

1. Commitment to Data Privacy

Suman Software Solutions Pvt. Ltd. ("Company", "We", "Our") respects your privacy and is dedicated to protecting personal data collected through the TallyDwell portal and We-Society mobile application. This Privacy Policy is formulated in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and Section 43A of the Information Technology Act, 2000 read with IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Categories of Personal Data Collected

We process personal data necessary for executing housing society administration and maintenance billing functions, including:

• Resident Identity Data: Name, unit/flat number, mobile phone number, email address.
• Financial Ledger Records: Maintenance dues, payment transaction receipts, opening/closing balance records synchronized from society Tally ERP.
• Gate Visitor Logs: Guard check-in logs, visitor name, vehicle registration number, entry timestamps.
• Technical Metadata: IP address, device identifier, app version, and login timestamps for security verification.

3. Data Storage Location & Cross-Border Processing Disclosures

Primary society databases, ledgers, and resident member profiles are hosted on encrypted cloud servers located within certified datacenter facilities in India. However, to deliver real-time notifications and transactional communications, certain operational data flows through global technology infrastructure under strict security protocols:

• WhatsApp Business API (Meta Platforms Inc.): Transmits maintenance bill alerts and PDF payment receipts.
• Transactional Email Services (Amazon Web Services SES / SMTP): Delivers digital statements and password reset OTPs.

All cross-border data routing for communication services is protected by 256-bit SSL encryption and strict data processing addendums ensuring compliance with Indian data sovereignty guidelines.

4. Cookies & Website Tracking Disclosure

Our website utilizes essential technical session cookies necessary for website navigation, user authentication, and CSRF security protection. We do not deploy third-party advertising tracking cookies or sell personal data to ad brokers.

5. Data Retention Schedule

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected:

• Mobile Accounts & Authentication Tokens: Retained during active society tenancy/membership and purged 30 calendar days following account deactivation.
• Statutory Society Financial Ledgers: Preserved for 8 years as mandated under the Maharashtra Co-operative Societies Act, 1960 and Indian Income Tax regulations.
• Gate Visitor Logs: Retained for 90 days for security auditing, after which logs are automatically archived or purged.

6. Resident Rights under DPDP Act 2023

Resident data principals possess specific rights under Indian privacy legislation:

• Right to Access & Correction: Review and update personal details through your society administrator or We-Society mobile app.
• Right to Withdraw Consent: You may withdraw consent for optional marketing communications at any time by emailing support@sumansoftware.com.
• Right to Complaint with Data Protection Board of India: If a privacy grievance remains unresolved by our Data Protection Officer within 30 days, you have the statutory right to file a complaint with the Data Protection Board of India established under the DPDP Act 2023.

7. Data Protection Officer & Grievance Contact

For privacy inquiries, data requests, or grievances under the DPDP Act 2023, please contact our Data Protection Officer: